PT-2026-85201

Name of the Vulnerable Software and Affected Versions MongoDB PHP driver affected versions not specified Description An out-of-bounds read occurs in the BSON decoding component. An unauthenticated party can provide specially formed input to cause a small amount of adjacent process memory to be...

PT-2026-85003

n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any error handling, causing the plaintext secret to...

The vulnerability of the __kvm_apic_update_irr() function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86-based Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the kvmapicupdateirr function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86-based Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CKAN MCP Server: Information disclosure via verbose error reflection

Error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server is pointed at or redirected/SSRF'd to a host that returns a non-CKAN response, or when an internal exception occurs, the caller receives...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105438 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refc...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105435 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/fslpamu: Fix resource leak in fslpamuprobe The fslpamuprobe returns directly when createcsd...

openSUSE 16 Security Update : libgpg-error (openSUSE-SU-2026:21706-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21706-1 advisory. This update for libgpg-error fixes the following issue: - Out-of-bounds read in gpgrtvfnameconcat of stringutils.c when the GPGRTFCONCATSYSCONF flag is...

The vulnerability of the arch_set_shadow_stack_status() function in the arch/arm64/mm/gcs.c module of the ARM 64-bit kernel support for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the archsetshadowstackstatus function in the arch/arm64/mm/gcs.c module of the Linux operating system’s ARM 64-bit kernel support is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tegra_hte_map_to_line_id() function in the drivers/hte/hte-tegra194.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tegrahtemaptolineid function in the drivers/hte/hte-tegra194.c module of the Linux operating system is related to a single-shift offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amba_device_release() function in the drivers/amba/bus.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ambadevicerelease function in the drivers/amba/bus.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the p2pmem_alloc_mmap() function in the drivers/pci/p2pdma.c module of the Linux operating system’s PCI device driver allows a hacker to cause a service failure.

The vulnerability of the p2pmemallocmmap function in the drivers/pci/p2pdma.c module of the Linux operating system’s PCI device driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the spi_imxremove() function in the drivers/spi/spi-imx.c file of the Linux operating system’s SPI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spiimxremove function in the drivers/spi/spi-imx.c module of the Linux operating system’s SPI device driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the tmc_enable_etr_sink_sysfs() function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux operating system’s hardware tracing driver allows a hacker to cause a service failure.

The vulnerability of the tmcenableetrsinksysfs function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux kernel’s hardware tracing driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a servic...

The vulnerability of the Translation Lookaside Buffer (TLB) of the Memory Management Unit (MMU) in ARM microprogramming processor software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Translation Lookaside Buffer TLB of the Memory Management Unit MMU in ARM microprogramming processor systems is related to errors in the representation of certain functions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrit...

Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-105542)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105542 advisory. A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check...

CVE-2026-84969: Out-of-bounds Write

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...

The vulnerability of the nested_vmcb02_prepare_control() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability...

AZL-99168 CVE-2026-56855 affecting package cf-cli for versions less than 8.7.11-9

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-99318 CVE-2026-56855 affecting package packer for versions less than 1.9.5-21

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...